Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019)
Chapter Two, Section II: protection (Articles 13 to 31) – Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019)

Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019) 15: Set clear policies, written into internal rules with matching measures, on personal devices inside the entity's network and on portable storage devices

What does 15 require?

The entity adopts clearly defined policies on two topics: the use of personal technical devices inside the network it controls, and the use of portable storage devices. Both policies are embedded in internal rules and backed by appropriate measures that make them effective in practice, for example technical restrictions on unknown devices and removable media.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27002:2022 · 2 controls

  • 7.10 Storage media
  • 8.1 User endpoint devices

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Chapter Two, Section II: protection (Articles 13 to 31) – Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019)

Query this from an agent

The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019) controls